CVE-2026-71179: OS Command Injection
Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell Update Package Frameworkto a version that resolves this vulnerability.Fixed in 26.07.03
Event History
Frequently Asked Questions
Which systems are exposed to exploitation?
Systems running Dell Update Package Framework versions earlier than 26.07.03 are affected. Exploitation requires local access and a low-privileged account.
What level of access does an attacker need, and what is the likely impact?
An attacker must already have local, low-privileged access and must perform an action that triggers the vulnerability. Successful exploitation could elevate privileges and affect confidentiality, integrity, and availability.
What should be prioritized for remediation?
Update Dell Update Package Framework to version 26.07.03 or later. Until updates are applied, restrict local access by limiting low-privileged accounts and preventing untrusted users from accessing affected systems.